hello,

im trying to build an IoT dataset for attack detection for my master thesis , the dataset should contain normal and anomaly data,

im using Wireshark to capture the network packets and CICflowmeter to extract the features from the pcap file and generate the CSV, now my problem is how to label each instance of this dataset, is there any script, program, algorithm or equations i could use to label each instance as normal or as udp flood attack .....